This message was deleted.

This message was deleted.

Another way of doing this is with the advanced (recursive) formatting options for String where delimiters for arrays and hashes can be tweaked (among other things).

This message was deleted.

This message was deleted.

At the risk of incurring the wrath of the Puppet community: Ansible will do that for you. I'll make all future conversations about this in a private message.

At the risk of incurring the wrath of the Puppet community: Ansible will do that for you.

At the risk of incurring the wrath of the Puppet community: Ansible will do that for you. I'll make all future conversations about this in a private message.

Good 0805 EST. This isn't specifically a Puppet question but one on how to integrate Terraform-created resource/object and Puppet configuration. I'm using Terraform to build some Oracle Cloud Infrastructure resources and one of those resources is an NFS export (provided by OCI) for use by several Oracle Linux servers. Terraform will create the NFS export and the servers and then I'd like to be able to export the name of the NFS export for use in a Puppet manifest. I'd like for this to happen in a CI/CD pipeline (probably a question for later) so that I can build and destroy the entire environment at will with the end goal of being able to build these environment in a disaster recovery situation. I'm trying to avoid building the OCI object, manually determining the NFS export name and then modifying my Puppet code with the proper NFS export name so that my servers properly mount the NFS export. Is anyone here doing something similar? If so, what advice would you give on getting those OCI/Terraform properties export and then added to Puppet code via automation? I'd like for this to be as hands-off as possible so that in a disaster recovery situation, humans have to do a little as possible. I have about 40 environments that will need rebuilding in case of a disaster. The NFS export does not contain any data at all in a rebuild situation; it's purely for the server cluster to receive XML files for ingestion into pretty reports. I found "local_file" but I'm not sure if that's the correct path to take.

Same can be done with a Hiera layer (to generate an Hiera yaml file I mean)

Hey, was hoping to hear if there was any info on when puppet7 server will be available for EL9, any info would be much appreciated 🙂

There a way to print messages during a puppet run that doesn't cause the puppet run to exit with a non-zero?

@gary Yes. I recommend using the ipcrm/echo module.

See the

ipcrm-echo

module at https://forge.puppet.com/ipcrm/echo?src=slack&channel=puppet

there is echo module

yep

@gary Yes. I recommend using the ipcrm/echo module.

thanks @natemccurdy @vchepkov!!

message has been deleted

Hello, Having an issue with the master connecting to the puppetdb when i run puppet node deactivate:

I get the following error: Debug: Creating new connection for https://host.fqdn:8081 Error: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [certificate revoked for /CN=host.fqdn] Error: Try 'puppet help node deactivate' for usage

the puppetdb ssl cert expired a few days, and i renewed it, but something went wrong so i revoked and re-issued every certificate since. When i check the certs using openssl in /etc/puppetlabs/puppet/ssl/ca/signed/ on the master, and /etc/puppetlabs/puppet/ssl/ on puppetdb, they both match

Warning: /etc/puppetlabs/puppetdb/ssl/private.pem does not match the file used by Puppet (/etc/puppetlabs/puppet/ssl/private_keys/scm-dbprd02.domain.com.pem) Warning: /etc/puppetlabs/puppetdb/ssl/public.pem does not match the file used by Puppet (/etc/puppetlabs/puppet/ssl/certs/scm-dbprd02.domain.com.pem)

Sounds like the Puppet agent has a new keypair in

/etc/puppetlabs/puppet/ssl

, but PupetDB is still using bits of the old keypair in

/etc/puppetlabs/puppetdb/ssl

so i should copy the key/cert from puppetdb's /etc/puppetlabs/puppet/ssl into puppetdb's /etc/puppetlabs/puppetdb/ssl ?

This message was deleted.

Hello, everyone. I’m wondering if there is a simple IDE to work with puppet? It must be compatible with Windows and Mac. I’m searching for something that can be easily used by our Level 1 support guys to do quick updates. Thank you.

The approach we use on other clouds, not OCI in our case but it may have an equivalent, is to use a key vault. We use terraform to populate azure keyvault and aws secrets manager after we've deployed resources on those platforms. We then use the hiera plugins such as hiera_aws_sm to query the vault for secret information generated by terraform. I believe OCI use OCI vault and whilst I haven't seen a plugin specifically for this for hiera, terraform can also use Hashicorp Vault and there is also a plugin for that.

@rnelson0 https://github.com/The-CODE-Plus-Plus-Community? is that it?